All issues

Search results

OIDC: honour Automatic onboarding on the API ID-token path (users must log into the UI once before bearer calls work)

Status: Open.

#23935 In goharbor/harbor;

· aivanov-wq opened on Sep 15, 2026

OIDC: admin group membership never persisted for existing user on re-login (only onboarding)

Status: Open.

#23932 In goharbor/harbor;

· loomen opened on Sep 15, 2026

Enforce authentication check on job status notification hook endpoints

kind/bug

Status: Open.

#23927 In goharbor/harbor;

· stonezdj opened on Sep 15, 2026

Proxy cache: a single transient error pushing to the local registry leaves the artifact permanently uncached

Status: Open.

#23926 In goharbor/harbor;

· jlctcloud opened on Sep 14, 2026

fix(jobservice): CPU spin when cron expression can never fire

Status: Open.

#23924 In goharbor/harbor;

· nikitakodkany opened on Sep 14, 2026

Invalid q= filter operands return 500 instead of 400 on every endpoint filtering through orm.QuerySetter

area/API

enhancement

Status: Open.

Bug

#23916 In goharbor/harbor;

· bupd opened on Sep 14, 2026

Feature Request: Surface high-level failure summary/reason in Replication Execution API

target/2.16.0

Status: Open.

#23912 In goharbor/harbor;

· xinyuanliu-cpu opened on Sep 11, 2026

Scan All takes over the jobservice worker pool and everything else needs to queue

needs/follow-up

Status: Open.

Feature

#23892 In goharbor/harbor;

· Vad1mo opened on Sep 10, 2026

POST /api/v2.0/ldap/ping ignores its own documented rule "an empty request loads the current configuration" for every field except the password

area/ldap

Status: Open.

#23891 In goharbor/harbor;

· ylobankov opened on Sep 10, 2026

Proxy cache with a non-registry upstream is accepted as healthy and returns HTML as blob content with HTTP 200

Status: Open.

#23882 In goharbor/harbor;

· shrenikgala opened on Sep 9, 2026

core deadlocks on its own DB pool: audit-log resolver takes a second connection inside transaction middleware (bulk user delete wedges core)

Status: Open.

Bug

#23879 In goharbor/harbor;

· Vad1mo opened on Sep 9, 2026

Proxy cache: Range requests for uncached blobs are ignored, full blob returned as 200, breaking lazy-loading (nydus)

area/proxy-cache

kind/requirementNew feature or idea on top of harborNew feature or idea on top of harbor

Status: Open.

#23875 In goharbor/harbor;

· IceCream-jy opened on Sep 9, 2026